Detection Engineer

Mehiläinen; Helsinki; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Hybrid work

Job summary

Mehiläinen, Helsinki, is seeking a Detection Engineer to lead the end-to-end detection engineering lifecycle and strengthen security across hybrid cloud/on-prem environments.

You will design detection rules, automate response playbooks, and collaborate with SOC, DevOps, and cloud teams to scale security as the organization grows.

Qualifications

• 5+ years in information security or related roles.
• Strong knowledge of detection engineering and day-to-day security operations.
• Experience with MITRE ATT&CK mapping.

Responsibilities

• Design, develop, and tune detection rules and correlation logic.
• Build security automation and orchestration playbooks.
• Collaborate with SOC, DevOps, cloud and infra teams to integrate telemetry.
• Lead threat hunting and translate findings into new detections.

Skills

Detection engineering

SIEM expertise

Threat hunting

Automation scripting

Education

Bachelor's degree

Tools

Microsoft Sentinel

Splunk

Python

PowerShell

Job description

Founded in 1909, Mehil e4inen is a rapidly growing healthcare company that strongly invests in the possibilities of digitalisation and innovation. We are on a journey towards an ambitious goal: to be the leading healthcare company in Europe by 2030. Our growth story has already taken us to seven countries, driven by modern technology and the experts who make us a frontrunner in the industry. IT plays a strategic role here 00e 0we are a business enabler.

We are looking for an innovative and solution-oriented Detection Engineer to strengthen our Information Security team.

As a Detection Engineer at Mehil e4inen, you\'ll be at the forefront of defending one of most critical digital healthcare ecosystems.

You\'ll own the detection engineering lifecycle end-to-end: building and tuning detection rules, developing automated response playbooks, and shaping the threat detection capability from the ground up. Your work will be a cornerstone of Mehil e4inen\'s information security foothold, ensuring that as the organization scales its services and data infrastructure, security scales with it.

What you will do

You\'ll join Mehil e4inen\'s information security team as the hands-on expert responsible for keeping our detection and response capabilities sharp and ahead of the threat landscape. Day-to-day, you\'ll work closely with our operational information security specialists, infrastructure engineers, and cloud teams to ensure visibility across our hybrid environment ads translating your co-operation into concrete detection logic and automated workflows. You\'ll also serve as a key voice in security architecture discussions, helping cross-functional teams build securely.

Key responsibilities:

• Design, develop, and continuously tune detection rules and correlation logic in the XSIAM, ensuring high-fidelity alerting with minimal noise across Mehil e4inen\'s cloud and on-premises environments.
• Build and maintain security automation and orchestration playbooks that accelerate incident triage, containment, and response.
• Collaborate with SOC, operational information security engineers, DevOps, cloud, infrastructure and application teams to integrate security telemetry from new systems and services, ensuring detection coverage scales alongside Mehil e4inen\'s growing digital footprint.
• Conduct threat hunting exercises and translate findings into new detections, feeding a continuous improvement loop between hunting, detection engineering, and incident response.

Requirements

We are looking for someone who brings:

• 5+ years of professional experience working with relevant information security technology, cyber security or other relevant roles.
• Strong understanding of detection engineering, automation and day-to-day information/cyber security operations.
• Up-to-date knowledge of the cyber security threat landscape.
• Hands-on experience with SIEM platforms (such as Microsoft Sentinel, Splunk, or equivalent).
• Proficiency in at least one scripting or programming language (Python, PowerShell, or similar) for building security automation, tooling, and integrations with APIs and SOAR platforms.
• Experience with cyber security monitoring solutions.
• Experience applying threat intelligence frameworks such as MITRE ATT&CK to map detection coverage and identify gaps.
• A relevant higher education degree (e.g. computer science, software engineering, information systems or equivalent); significant practical experience may be considered in lieu of a formal degree.
• Fluent English; Finnish or another Mehil e4inen Group language is an advantage.

Personal success factors

• A growth mindset a a0you enjoy challenges and embrace opportunities to develop both professionally and personally.
• A hands-on, can-do attitude a a0you are not afraid to roll up your sleeves and take ownership.
• Comfortability making pragmatic decisions under pressure.
• Strong sense of ownership and accountability for quality and outcomes.
• Comfort operating in ambiguity and across multiple countries and cultures simultaneously.
• A collaborative spirit that brings out the best in the people around you.

We are all committed to acting in line with our values, and we believe the best results come from giving our experts freedom, responsibility, community, and opportunities to grow. We offer the opportunity to work with modern technologies and innovative solutions in a challenging and diverse role, alongside a professional and supportive team. You can choose your own work equipment, enjoy a variety of activities to balance work life, and have the opportunity to work flexibly in a hybrid setup.